The controller within the meaning of data protection laws (in particular GDPR) is the above-mentioned

company.

2. Collection and storage of personal data when visiting our website

When you access our website, technical information is automatically transmitted by your

browser to our server. This includes in particular:

• IP address
  
  

• Date and time of the request
  
  

• Browser type and version
  
  

• Operating system
  
  

• Referrer URL
  
  

• Visited pages
  
  

This data is technically required to provide the website and serves the purpose of

stability and IT security.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure, technical operation)

3. Hosting & Infrastructure

3.1 Cloudflare

We use Cloudflare (Cloudflare Inc., USA) for:

• DNS provisioning
  
  

• Security features
  
  

• Performance optimization (CDN)
  
  

Cloudflare processes technical data such as IP address and browser data on global servers.

Legal basis: Art. 6 para. 1 lit. f GDPR

Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/

An adequate level of data protection is guaranteed via EU Standard Contractual Clauses

guaranteed.

3.2 Framer

Our website is created and hosted via Framer B.V., Netherlands.

Framer processes:

• technical usage data (see above)
  
  

• Form data, if entered via the page
  
  

Legal basis: Art. 6 para. 1 lit. f GDPR

Framer Privacy Policy: https://www.framer.com/privacy/

4. Waitlist Sign-up

What data we collect

When you sign up for the waitlist, we collect:

• Email address
  
  

• Optional: Name or other voluntary details

This data is used exclusively to:

• inform you about product updates
  
  

• contact you if necessary
  
  

• conduct internal analyses (e.g. demand analysis)
  
  

Storage in Google Sheets

The waitlist is organized via Google Sheets

(Google Ireland Limited, Ireland / Google LLC, USA).

Data is processed in:

• Google Sheets
  
  

• Google Drive
  
  

• associated Google services, if applicable
  
  

Legal basis: Art. 6 para. 1 lit. a GDPR (consent in the form)

Information on data transfer

Google uses servers outside the EU (including USA).

An adequate level of data protection is guaranteed via EU Standard Contractual Clauses

guaranteed.

Google Privacy Policy: https://policies.google.com/privacy

5. Redirect to Ashby (Jobs)

For our job postings, we use the external platform Ashby (Ashby, Inc., USA).

When you click on the job page, you will be redirected to an external website.

Ashby processes data on its own responsibility.

Ashby Privacy Policy: https://www.ashbyhq.com/privacy

The redirect occurs only after your voluntary click.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent through use)

6. Contacting Us

If you contact us by email, the data you transmit (e.g. name, email, content of the message) will be processed to answer your request.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

7. Storage Period

We store personal data only as long as necessary for the respective purposes:

• Waitlist data: until unsubscription
  
  

• Contact requests: until completion of processing
  
  

• Technical server data: a few days to weeks

You can request the deletion of your data at any time (see below).

8. Transfer of Personal Data

We do not share your data with third parties, except:

• to technical service providers (Cloudflare, Framer, Google) whom we have contractually engaged in accordance with Art. 28 GDPR
  
  

• if we are legally obliged to do so

Data sale never takes place.

9. Rights of the Data Subjects

You have the following rights at any time:

• Access (Art. 15 GDPR)
  
  

• Rectification (Art. 16 GDPR)
  
  

• Erasure (Art. 17 GDPR)
  
  

• Restriction of processing (Art. 18 GDPR)
  
  

• Data portability (Art. 20 GDPR)
  
  

• Withdrawal of your consent (Art. 7 GDPR)
  
  

• Lodge a complaint with the supervisory authority (Art. 77 GDPR)

10. Withdrawal of Consent (Waitlist)

You can withdraw your consent to the processing of your waitlist data at any time, e.g.